Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier: xDOYyPJLJVEzyYH8W60+7vpky2izQA71PAz6GuSWUyI=
Subject key identifier: 86:78:53:71:A1:92:82:DA:64:FC:06:2E:2B:6F:C2:63:A2:D5:D9:99
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 019F905A5D77369187C1090700AB8F18E006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number: 0A38
Signing time: Thu 23 Jul 2026 19:01:08 +0000
Manifest this update: Thu 23 Jul 2026 19:01:08 +0000
Manifest next update: Fri 24 Jul 2026 19:01:08 +0000
Files and hashes: 1: BP8ohZBcj6NcqBRjGc25QgNrnnI.roa (hash: 395UmkLig0TCCb9njfR7+pVbNAtUDBDAYXAZ0wdHK9o=)
2: ew71Dr2hxhH6I9_RZhH0lsluIig.roa (hash: 0cm9urifI/2Uh0AOprLssITUSaMSxFAaeqTRzg9iNI0=)
3: jCJ22Fdf8SnbI8DcZqU35nF2Zew.roa (hash: JVckqbft6dBMO2AzO5LhlxSJUFnZrQ2XDuU3MVU82uA=)
4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: tD/i/aTZDYvQVDAvOyzzYwucM8uhf5S6n9atcx+JVPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:5d:77:36:91:87:c1:09:07:00:ab:8f:18:e0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Jul 23 19:01:08 2026 GMT
Not After : Jul 24 19:01:08 2026 GMT
Subject: CN=86785371a19282da64fc062e2b6fc263a2d5d999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:56:aa:83:f8:d8:9a:23:50:30:6d:dd:05:
1c:34:cf:d1:ac:18:8e:b2:e7:62:ab:c4:70:a0:11:
9f:79:91:9a:96:1c:1d:c5:33:7b:b0:45:b5:70:af:
9b:ff:4e:6a:a5:a4:af:b5:b3:45:df:9c:74:3d:88:
94:3d:3a:f1:c1:87:26:10:4b:98:e2:b2:c1:9e:ce:
3c:cc:8b:75:fc:39:0b:6a:25:e5:d2:53:fe:e1:00:
56:99:ff:56:8b:f2:03:2b:c5:e1:63:73:1d:71:64:
9b:a6:86:dd:fc:53:62:78:f5:ba:eb:59:43:be:cf:
3e:f7:f5:82:e8:ea:23:18:1b:0b:c6:9e:30:51:44:
63:c7:6a:37:78:f6:e3:2f:10:21:b8:fa:e9:eb:56:
0b:69:f9:1c:d3:57:3f:50:93:5c:50:9a:cb:90:18:
e5:b2:79:f0:a7:84:b0:dc:52:da:da:ee:82:34:1a:
2d:b2:1b:75:f9:79:20:a7:dc:e9:57:71:21:13:86:
d7:d4:3d:d5:b8:03:f7:7e:64:57:0b:8a:83:df:1e:
1c:32:4e:e3:3d:53:66:61:5d:8e:c7:00:7d:6f:65:
0d:f8:a0:af:bd:e7:13:c2:4c:37:b0:41:1d:ce:b6:
8f:61:da:53:1f:7d:b1:48:b1:a6:05:fd:a3:fe:72:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:78:53:71:A1:92:82:DA:64:FC:06:2E:2B:6F:C2:63:A2:D5:D9:99
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4b:21:5e:85:18:f8:62:b6:0f:de:84:83:ab:89:f5:55:4c:
10:ca:a3:83:a9:d5:49:ae:0e:38:f9:1a:b9:67:43:f4:92:cb:
be:95:ca:3d:9c:ed:2a:8a:08:c5:35:ca:c6:01:f8:ba:09:96:
78:40:0f:0f:f3:7d:c5:44:c4:66:eb:58:67:2c:a2:5f:89:8f:
af:d1:70:12:12:f2:d5:14:ca:a7:fe:a0:8c:a0:da:76:d3:26:
f8:96:fc:58:c7:d4:f5:74:54:ad:50:f2:b4:bd:eb:bb:1f:eb:
a5:56:c6:4b:6a:b1:59:87:f9:69:68:e9:17:87:5d:20:05:05:
5d:5b:57:24:1f:bb:3c:30:5e:65:ca:23:53:b6:fd:2d:f8:2f:
56:76:96:cd:be:6e:1a:ba:2c:b9:31:72:27:11:2a:d1:c5:5b:
2e:7e:8d:c9:22:c6:2f:37:ee:fb:51:49:2f:64:e7:aa:d5:67:
10:93:a9:b7:93:ae:31:5f:e8:f4:cd:a0:43:6e:a9:9d:4f:dd:
88:34:09:a9:9c:85:11:b2:2e:23:64:b5:21:50:05:9d:9f:4d:
7b:90:aa:e8:93:6a:fb:4b:6b:36:f0:46:53:ff:8b:72:9a:d3:
cc:94:bd:b3:5f:21:79:a2:a3:f6:2b:e0:0a:5c:73:a8:c4:65:
ce:86:10:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:43 2026 by rpki-client